Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier: 4+PS2kGybn7WUUK6Q5xJ8OqGn1TVWwAuJ0ds4wXgfHM=
Subject key identifier: 7E:DD:C4:F7:8C:3A:4B:7A:0D:35:89:72:DD:AC:C4:AF:8F:33:9C:DD
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 019FAA50A711A9FC705496E9B59158F0636C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number: 0FAD
Signing time: Tue 28 Jul 2026 20:00:39 +0000
Manifest this update: Tue 28 Jul 2026 20:00:39 +0000
Manifest next update: Wed 29 Jul 2026 20:00:39 +0000
Files and hashes: 1: 1j-0fRD2UKFFOwRpmh3BdgzS-KY.roa (hash: J/OpGEjDOcAf1NYGQDPN+Up9rV3l4EiqrJmyP7OZ814=)
2: 1jeMDJUiXFwN8iyBiVBPKoxXVXs.roa (hash: AMsBQ6qY2ffhJac7OKTZiKgzqFTd8W61KP5VxcegYfI=)
3: 8dzN450MceNxFZuh40v7FDAkGTQ.roa (hash: BgZesWB7TBZ2ukStYIi5/XRVw/OSfrLbRqY0NDLypP4=)
4: 8qcIukp4HnQx0oYkGLwCzsKZiYo.roa (hash: lKiK6GaUIl/2a4hMyDoRDNhH9WPIQAXZ8Vf6bDffpMU=)
5: QHyWqsk-H_U_C8FgB92VgJrEDYc.roa (hash: 2PrV5bBw8H3ip6Yld1QjjzmInJzdg74Uy0jZkkwlPFU=)
6: SebffTJZqAhjn9b2tB5fFNf4TVo.roa (hash: gyrU041nZbWUtGgHmkEeVRe5OSCwzL356v2625rtYDU=)
7: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: NKXplspgdCcY4RpKdkLwEl69pA3BhRuefq9c0dxT8oQ=)
8: yvdM8oqK9UEjHe-j9vf4hYEvsHI.roa (hash: FyIoG3Rlf0BHBBnW/KlrAfAwmMpmY2nq+UoGuSzOyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:a7:11:a9:fc:70:54:96:e9:b5:91:58:f0:63:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Jul 28 20:00:39 2026 GMT
Not After : Jul 29 20:00:39 2026 GMT
Subject: CN=7eddc4f78c3a4b7a0d358972ddacc4af8f339cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b1:fb:01:b4:d2:2f:af:35:b4:43:f5:91:5e:
3a:94:01:bd:c3:6b:ed:aa:7b:cd:08:77:03:1f:6b:
48:70:96:f4:4a:35:c7:2d:13:03:14:a7:e4:0b:a5:
de:44:3a:45:17:71:05:0f:17:5a:04:ec:4a:a9:02:
d3:67:cd:e2:fd:86:94:1f:73:ec:08:e2:fb:e8:88:
45:ae:e0:69:bb:63:31:6c:39:c3:24:e0:44:b7:2d:
b3:c6:d1:f6:ef:f6:61:8f:57:ab:98:aa:5b:55:21:
8b:9d:5a:7c:71:b1:99:5c:f7:cb:61:c2:b5:c8:f9:
87:62:2f:79:b8:fe:c5:32:3d:e0:06:06:de:54:47:
c4:dd:00:9c:3d:2c:41:f5:7c:00:0e:65:59:9c:5a:
35:31:6a:f9:73:1a:28:e1:6b:be:43:c7:2c:01:90:
d6:c8:ff:f0:fd:aa:4c:55:cf:5a:0e:00:a9:fe:fb:
08:3d:3e:da:16:65:9b:ac:fe:63:02:74:74:1d:7b:
ae:ce:60:69:c0:04:91:fa:ce:c8:3b:13:b4:36:15:
04:6f:71:48:fc:e4:8b:d2:48:5a:e7:ed:90:9f:9b:
4b:28:c8:6b:70:0d:07:fd:45:88:f8:30:b3:75:8b:
e7:06:72:52:d7:c9:72:f3:38:d8:46:d9:23:36:26:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DD:C4:F7:8C:3A:4B:7A:0D:35:89:72:DD:AC:C4:AF:8F:33:9C:DD
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3a:c9:93:17:b7:1c:91:bc:b7:6b:e4:47:45:cd:a4:a8:16:
62:16:77:1c:15:01:41:a2:01:92:00:1d:43:14:f4:6f:13:3a:
77:49:03:20:74:4f:01:c6:c5:3f:cc:9e:0d:e5:d0:4c:06:92:
ad:e3:4e:55:9e:30:d9:dd:2b:29:39:85:61:90:36:de:37:1c:
2c:90:0e:77:92:ba:f5:8a:c6:3e:49:ad:25:9c:0b:84:18:62:
6e:08:a3:5a:c1:ef:07:2b:65:d6:e9:1e:ba:ec:f7:d8:57:c6:
ea:85:7f:88:d2:7a:b0:22:c5:b1:52:71:4a:df:2e:13:fb:cc:
56:29:57:19:4d:ca:46:15:d5:1e:52:48:26:9c:f7:0f:ab:1f:
19:a5:04:55:1c:88:a6:2c:23:22:0b:40:3e:63:a9:94:2a:6f:
59:d6:88:2e:0e:e3:7b:65:aa:21:62:ec:13:ef:cc:7d:f6:f8:
b9:fd:f8:70:2f:d7:70:16:2f:12:f0:52:f5:4f:63:f5:f0:5c:
fa:1e:ae:9d:c2:a1:a1:88:c7:b7:77:fb:46:35:ba:af:fe:b1:
08:5c:8b:99:5a:ef:83:67:9c:7f:ca:23:0f:4c:da:c6:01:fe:
26:b7:11:b8:a6:6d:b9:87:25:38:30:38:f2:6a:70:37:1c:8e:
a1:bb:fa:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUKcRqfxwVJbptZFY8GNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlODE5OWU4MzQ1NTY3ZDg1MTZiNzg4ZmUyZTFkMzk3ZTI3
YzczYTQwHhcNMjYwNzI4MjAwMDM5WhcNMjYwNzI5MjAwMDM5WjAzMTEwLwYDVQQD
Eyg3ZWRkYzRmNzhjM2E0YjdhMGQzNTg5NzJkZGFjYzRhZjhmMzM5Y2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LH7AbTSL681tEP1kV46lAG9w2vt
qnvNCHcDH2tIcJb0SjXHLRMDFKfkC6XeRDpFF3EFDxdaBOxKqQLTZ83i/YaUH3Ps
COL76IhFruBpu2MxbDnDJOBEty2zxtH27/Zhj1ermKpbVSGLnVp8cbGZXPfLYcK1
yPmHYi95uP7FMj3gBgbeVEfE3QCcPSxB9XwADmVZnFo1MWr5cxoo4Wu+Q8csAZDW
yP/w/apMVc9aDgCp/vsIPT7aFmWbrP5jAnR0HXuuzmBpwASR+s7IOxO0NhUEb3FI
/OSL0kha5+2Qn5tLKMhrcA0H/UWI+DCzdYvnBnJS18ly8zjYRtkjNiYV/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7dxPeMOkt6DTWJct2sxK+PM5zdMB8GA1UdIwQY
MBaAFP6Bmeg0VWfYUWt4j+Lh05fifHOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQt
ODQwY2NiMzRiM2Y1LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kMDllMzQtY2MxMS00Mzk0LTkwNGQtODQwY2NiMzRiM2Y1
LzEvX29HWjZEUlZaOWhSYTNpUDR1SFRsLUo4YzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtjrJkxe3
HJG8t2vkR0XNpKgWYhZ3HBUBQaIBkgAdQxT0bxM6d0kDIHRPAcbFP8yeDeXQTAaS
reNOVZ4w2d0rKTmFYZA23jccLJAOd5K69YrGPkmtJZwLhBhibgijWsHvBytl1uke
uuz32FfG6oV/iNJ6sCLFsVJxSt8uE/vMVilXGU3KRhXVHlJIJpz3D6sfGaUEVRyI
piwjIgtAPmOplCpvWdaILg7je2WqIWLsE+/Mffb4uf34cC/XcBYvEvBS9U9j9fBc
+h6uncKhoYjHt3f7RjW6r/6xCFyLmVrvg2ecf8ojD0zaxgH+JrcRuKZtuYclODA4
8mpwNxyOobv6ng==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:52 2026 by rpki-client